Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: Fgx5g8wnqwLVDRFwlBsinpY3VrXA6PWS/p3ObUikDrI=
Subject key identifier: 05:8B:14:BF:EA:B2:05:AE:FC:85:AB:2E:2A:F3:68:2D:86:1C:62:55
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 0199FB463BEB97C24A831D221CB0A813321F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 07FC
Signing time: Sun 19 Oct 2025 07:01:48 +0000
Manifest this update: Sun 19 Oct 2025 07:01:48 +0000
Manifest next update: Mon 20 Oct 2025 07:01:48 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: ETLjW5CZ+8TWWq1J77Kkl4IhlNgvH1IeilHbB68c7Fg=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:3b:eb:97:c2:4a:83:1d:22:1c:b0:a8:13:32:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Oct 19 07:01:48 2025 GMT
Not After : Oct 20 07:01:48 2025 GMT
Subject: CN=058b14bfeab205aefc85ab2e2af3682d861c6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:b5:67:ed:27:c4:0d:a3:d8:d4:0b:1b:77:
c2:8d:05:7b:1c:e2:d5:08:20:23:00:d1:e8:47:a6:
c7:b3:fc:db:72:98:df:27:e3:af:9c:00:1e:cf:da:
b2:8e:cf:f1:43:39:eb:99:19:7b:33:48:59:82:c1:
e9:b0:f9:29:f2:a7:4f:94:9d:73:22:4e:0f:18:60:
53:c4:26:94:1c:93:72:7f:ee:1e:06:b7:53:f4:1e:
e0:5d:68:65:ad:94:29:9a:2a:4d:da:44:17:5a:33:
4f:32:db:1b:1e:c2:2c:55:ee:27:95:92:cf:cc:f6:
68:44:94:2c:bc:d3:08:68:9d:87:f2:fa:75:b3:87:
25:3d:72:7c:5f:b7:89:0b:35:4f:52:70:c0:02:b1:
ea:58:8c:1c:14:ca:f6:ec:01:06:5b:d2:a2:d5:49:
06:80:7f:c7:83:f3:4a:cb:ab:25:5e:9f:09:17:1f:
82:c4:6a:bb:77:b2:48:c3:4d:ca:a7:dd:20:bd:65:
44:c4:05:a2:12:35:d8:ed:dd:84:fc:2a:dd:e3:c2:
47:f7:e7:1a:98:57:5e:2a:d4:49:29:16:47:76:2a:
17:30:82:4e:72:75:bf:ce:b6:cc:7c:c7:4b:f0:ef:
ec:96:f9:5e:dc:90:e4:97:eb:6a:20:65:13:c2:b4:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:14:BF:EA:B2:05:AE:FC:85:AB:2E:2A:F3:68:2D:86:1C:62:55
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:36:f4:46:cf:7e:2a:ad:49:e9:9f:18:2d:28:ca:fc:6d:
e9:4f:91:e4:78:36:83:57:99:2d:5b:70:1b:0b:44:d7:53:0f:
6a:78:d2:27:e8:7f:1c:29:55:27:f4:b1:de:c6:80:61:d9:8f:
eb:ac:49:c0:51:34:df:98:4f:90:e7:b1:ea:2b:6d:18:fb:d1:
20:50:0c:d9:e7:31:74:61:8a:52:ca:a2:72:a8:e8:25:2e:4e:
c3:8c:0d:1d:eb:2b:43:8b:2b:ca:2b:cb:9b:f6:b3:d9:f7:55:
8f:23:03:a5:37:a8:ea:dc:fa:60:90:e8:63:c6:9a:0c:4f:c2:
09:48:32:da:38:6e:56:5c:a7:30:23:c7:fd:47:47:39:e9:6f:
69:4b:0e:bf:ac:90:ef:29:0a:33:3d:4d:77:49:36:fa:da:d3:
1f:b7:79:26:6b:03:24:0d:39:06:ea:30:da:ac:61:33:e4:38:
de:eb:e9:97:79:ed:b9:79:b0:e5:1c:ab:51:d0:92:40:8e:33:
3c:29:2c:0f:a1:5f:f6:80:92:b7:cf:b9:a2:f8:00:7f:59:13:
aa:eb:fa:a7:ce:3d:c8:a3:eb:74:62:6d:de:93:31:94:b7:85:
62:e5:6b:a7:04:07:84:d2:f5:ce:cc:c3:57:5f:a5:cb:9f:cf:
0b:31:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:10 2025 by rpki-client